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APPARATUS AND METHOD FOR PROVIDING A CENTRALIZED PERSONAL 
DATA BASE ACCESSED BY COMBINED MULTIPLE IDENTIFICATION 

NUMBERS 

5 

FIELD OF THE INVENTION 

The present invention relates to a centralized personal data bank and a system for 
accessing the centralized personal data bank by a user and also for accessing the centralized 
personal data bank by any person to whom the user gives a primary number and a 

1 0 secondary number. 

BACKGROUND OF THE INVENTION 

Personal information such as name, address, telephone number, credit, or account 
information is needed for most transactions. With the increase in transactions conducted 
over the Internet, the repetitive requirement for providing personal information increases 

15 rapidly. For example, every company that sends a bill or a monthly statement (e.g. 
telephone company, utility company, bank, etc.) to a person, requires notification of a 
change in that person's address, phone number or other information. A need exists for an 
automated process that eliminates the repetitive tasks of providing basic information, 
updating account records, providing change of address information, and contacting each 

20 separate business. 
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SUMMARY OF THE INVENTION 

The invention that meets the needs identified above is a centralized personal data 
base accessible through the Internet and secured by a combination of identification 
numbers, including a basic, a primary and a secondary number. The secure personal data 
base is accessible to the user by the combination of the basic and a primary number. The 
secure personal data base is accessible to others who have been supplied with a primary and 
a secondary number. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The novel features believed characteristic of the invention are set forth in the 
appended claims. The invention itself, however, as well as a preferred mode of use, further 
objectives and advantages thereof, will best be understood by reference to the following 
detailed description of an illustrative embodiment when read in conjunction with the 
accompanying drawings, wherein: 

Figure 1 is depiction of a distributed data processing system; 

Figure 2 is a depiction of a server computer; 

Figure 3 is a depiction of a client computer; 

Figure 4 is a depiction of the centralized personal data base memory; 
Figure 5 is flowchart of the overall centralized personal data base process; 
Figure 6 is a flowchart of the registration process; 
Figure 7 is a flow chart of the account set up process; 
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Figure 8 is a flow chart of the merchant notification process; 
Figure 9 is a flowchart of the update process; and 
Figure 10 is a flow chart of the merchant access process. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

Figure 1 depicts a pictorial representation of distributed data processing system 100 
in which the present invention may be implemented and is intended as an example, and not 
as an architectural limitation, for the processes of the present invention. Distributed data 
processing system 100 is a network of computers containing network 102, which is the 
medium used to provide communications links between various devices and computers 
connected together within distributed data processing system 100. Network 102 may 
include permanent connections, such as wire or fiber optic cables, or temporary connections 
made through telephone connections. In the depicted example, server 104 is connected to 
network 102 along with storage unit 106. In addition, clients 108, 110, and 112 also are 
connected to a network 102. Clients 108, 110, and 112 may be, for example, personal 
computers or network computers. 

For purposes of this application, a network computer is any computer, coupled to a 
network, which receives a program or other application from another computer coupled to 
the network. In the depicted example, server 104 provides Web based applications to 
clients 108, 110 and 112. Clients 108, 110, and 112 are clients to server 104. Distributed 
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data processing system 100 may include additional servers, clients, and other devices not 
shown. In the depicted example, distributed data processing system 100 is the Internet 
with network 102 representing a worldwide collection of networks and gateways that use 
the TCP/IP suite of protocols to communicate with one another. Distributed data 
5 processing system 100 may also be implemented as a number of different types of 
networks, such as for example, an intranet, a local area network (LAN), or a wide area 
network (WAN). 

|^J\^ N^Referring to Figure 2, a block diagram depicts a data processing system, which may 

be implemented as a server, such as server 104 in Figure 1. Data processing system 200 
10 may be a symmeu^icmultiprocessor (SMP) system including a plurality of processors such 
as first processor 202\nd second processor 204 connected to system bus 206. 
Alternatively, a single processoXsystem may be employed. Also connected to system bus 
206 is memory controller/cache 208>which provides an interface to local memory 209. 
I/O bus bridge 210 is connected to system 1^206 and provides an interface to 1/0 bus 212. 
15 Memory controller/cache 208 and I/O bus bridgX210 may be integrated as depicted. 
Peripheral component interconnect (PCI) bus bridge 214\onnected to I/O bus 212 provides 
an interface to first PCI local bus 216. Modem 218 may be connected to first PCI bus local 
216. Typical PCI bus implementations will support four PCI expansion slots or add-in 
connectors. Communications links to network computers 108, 110 and llZlnFigure 1 may 
20 be provided through modem 218 and network adapter 220 connected to first PCNocal bus 
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^ x 216 through add-in boards. Additional PCI bus bridges such as second PCI bus bridge 222 

aHd third PCI bus bridge 224 provide interfaces for additional PCI local buses such as 
second PCI local bus 226 and third PCI local bus 228, from which additional modems or 
network adapters may be supported. In this manner, server 200 allows connections to 
5 multiple networic computers. A memory-mapped graphics adapter 230 and hard disk 232 
may also be connected to I/O bus 212 as depicted, either directly or indirectly. Those of 
ordinary skill in the artNvill appreciate that the hardware depicted in Figure 2 may vary. 
For example, other peripheral devices, such as an optical disk drive and the like also may 
be used in addition or in place\f the hardware depicted. The depicted example is not 
10 meant to imply architectural limitations with respect to the present invention. The data 
processing system depicted in Figure 2 inky be, for example, an IBM RISC/System 6000 
system, a product of International Business Machines Corporation in Armonk, New York, 
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running the Advanced Interactive Executive (ADC/operating system. 

With reference now to Figure 3, a block diagram^llustrates data processing system 

15 300 in which the invention may be implemented. Data processing system 300 is an 
example of either a stand-alone computer, if not connected to distributed data processing 
system 100, or a client computer, if connected to distributed data processing system 100. 
Data processing system 300 employs a peripheral component interconnect (PCI) local bus 
architecture. Although the depicted example employs a PCI bus, other bus Architectures 

20 such as Micro Channel and ISA may be used. Processor 302 and main memoiy\304 are 
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connected to PCI local bus 306 through PCI bridge 303. PCI bridge 303 also may include 
^ integrated memory controller and cache memory for Processor 302. Additional 



Qfy connections to PCI local bus 306 may be made through direct component interconnection 

or througn^add-in boards. In the depicted example, local area network (LAN) adapter 310, 
5 SCSI host bus adapter 312, and expansion bus interface 314 are connected to PCI local bus 
306 by direct component connection. In contrast, audio adapter 316, graphics adapter 318, 
and audio/video adapter(A/V) 319 are connected to PCI local bus 306 by add-in boards 
inserted into expansion slotk Expansion bus interface 314 provides a connection for a 
D keyboard and mouse adapter 320^modem 322, and additional memory 324. SCSI host bus 

5 10 adapter 312 provides a connection fokhard disk drive 326, tape drive 328, and CD-ROM 
330 in the depicted example. Typical PCFiocal bus implementations will support three or 
four PCI expansion slots or add-in connectors/An operating system runs on processor 302 
Q and is used to coordinate and provide control of vaHous components within data processing 

system 300 in Figure 3. The operating system may be\commercially available operating 
15 system such as OS/2, which is available from International Business Machines Corporation. 
"OS/2" is a trademark of International Business Machines Corporation. An object oriented 
programming system, such as Java, may run in conjunction with the operating system and 
provides calls to the operating system from Java programs or applicatiohs executing on data 
processing system 300. "Java" is a trademark of Sun Microsystem^ Incorporated. 
20 Instructions for the operating system, the object-oriented operating system, and applications 



tn 



s 



m 



6 



ATTORNEY DOCKET NO. AUS9200 1 0328US 1 7 

or programs may be located on storage devices, such as hard disk drive 326, and they may 
be^loaded into main memory 304 for execution by processor 302. Those of ordinary skill in 
| the a^ will appreciate that the hardware in Figure 3 may vary depending on the 

implemeikation. Other internal hardware or peripheral devices, such as flash ROM (or 
equivalent nohyolatile memory) or optical disk drives and the like, may be used in addition 
to or in place of the hardware depicted in Figure 3. Also, the processes of the present 
invention may be applied to a multiprocessor data processing system. For example, data 
processing system 300, ifWionally configured as a network computer, may not include 
O SCSI host bus adapter 312, hard disk drive 326, tape drive 328, and CD-ROM 330, as noted 

53 10 by the box with the dotted line in\igure 3 denoting optional inclusion. In that case, the 

"03 

% computer, to be properly called a client computer, must include some type of network 

hJ communication interface, such as LAN adapter 310, modem 322, or the like. As another 

example, data processing system 300 may bfe a stand-alone system configured to be 
bootable without relying on some type of network communication interface, whether or not 
1 5 data processing system 300 comprises some type of network communication interface. As a 
further example, data processing system 300 may be a Perkpnal Digital Assistant (PDA) 
device which is configured with ROM and/or flash ROM in or&er to provide non- volatile 
memory for storing operating system files and/or user-generated data. The depicted 
example in Figure 3 and above-described examples are not meant to imply architectural 
20 limitations with respect to the present invention. It is important to not^Sttiat while the 
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present invention has been described in the context of a fully functioning data processing 
\ system, those of ordinary skill in the art will appreciate that the processes of the present 

ry invention are capable of being distributed in a form of a computer readable medium of 
instructions and a variety of forms and that the present invention applies equally regardless 
of the particular type of signal bearing media actually used to carry out the distribution. 
Examples of comptiter readable media include recordable-type media, such as a floppy disc, 
a hard disk drive, a RAM, and a CD-ROM, and transmission-type media such as digital 
and analog communicationsHinks. 
O Fig 4. depicts centralized personal data base 400. As used herein, the term 

1 0 centralized personal data base (CPDBWeans ( 1 ) a data base that may be accessed by a user 
having a basic and a primary number and also by any person to whom the user provides a 
Rj primary and a secondary number, (2) a data b^e that can be accessed through the Internet 

D from a centralized personal data base web site, an<r(3) that may be located in one storage 

! 2 area connected to one or more server computers that maVbe distributed in multiple storage 

y i \ 

y. 15 areas each of which are connected to one or more server computers. CPDB 400 contains 
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set-up program 410, access program 420, basic, primary and secoijdary number generation 
program 430, registration program 440, search program 450, merchW data base 460 and 
user data base 470. Alternatively, set-up program 410, access program^20, primary and 
secondary number generation program 440, registration program 450 and search program 
20 460 may be located in the memory of a server computer or distributed among a plumlity of 
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computers and linked to each other and the CPDB by a network. Furthermore, one or more 
j \>f the above referenced programs may be built into a web browser program or furnished as 

a jJl^g-in to a web browser program. 
Q NFig. 5 depicts a flow chart of CPDB process 500 showing the three main steps in the 

5 overall CFEH3 process 500. The first step is registration (600). The second step is 
notification (600). The third step is access (700). 

Fig. 6 depict^flie steps in registration 600. Registration 600 begins (602) when 
registration program 420 of CPDB 400 is invoked by a consumer accessing the CPDB 
~ website and indicating a desire ^register. The consumer inputs data such as name, social 

10 security number, date of birth, phone'tmmber, fax number, e-mail address, and any other 
information that may be required by a mer^ant, service provider or government agency 
(620). The consumer receives a basic numbert<80). The consumer also receives a 
primary number (640). As used herein the term nwhber means a unique code number 
comprising a plurality of individual numerals assigned to an^uthorized user and shall have 
U 15 the same meaning as a personal identification number (PIN). He basic number and the 
primary number are used by the CPDB customer to access and changfevtfie CPDB record 
and to create or delete primary and secondary numbers. The registratioirprocess ends 
(650). 

The relationship of the three types of numbers used for access is shown in Table A. 

20 
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Type 



User 



Merchant 



Basic 




No 


Primary 






Secondary 


No 


£ - ^Yes } * 



Table A 

The user is the only person with the basic number and therefore, although the 
primary number is given out to others, the user is the only one who can access his account 
to input or change information. The secondary number is used by the person to whom the 
user desires to give access. A variety of secondary numbers can be created for different 
purposes. 

Fig. 7 depicts the process for secondary number creation. The consumer goes to the 
CPDB website (710) and logs on (720) by inputting the basic number and the primary 
number. The user selects secondary number creation from the menu (730). One or more 
secondary numbers can becrfcated for each CPDB primary number. The user selects the 
information that is to be accessibleVamerchant (740). In other words, the user decides 
what information can be accessed by a merchantusing the primary number in combination 
with each particular secondary number the user wilisprovide. A determination is made 
whether the user wants to attach an expiration date to the secondary number (742). If the 
user wants to attach an expiration date to the secondary number, the^user will enter the 
expiration date or select from a range of time periods offered by the CPDBVebsite (744). 
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If the user enters an expiration date or selects a time period, the secondary number will not 
b^effective after the date arrives or the time period expires. If the consumer does not want 
to placfc an expiration date on the secondary number, then the process goes to step 750. The 
consumer receives a secondary number (750). A determination is made as to whether 
5 another secondary number is desired (760). If another secondary number is desired, then the 
process returns to st^p 740. If another secondary number is not desired, the process ends 
(770). 

Fig. 8 depicts a flowchart of merchant notification process 800. A determination is 
made as to whether the merchahj is in the merchant data base of the CPDB (810). If the 

1 0 merchant is not in the CPDB merchant data base, then the user inputs the information (820) 
and the process goes to step 830. If the merchant is in the CPDB merchant data base, then 
the process goes to step 830. The user selecrs the merchants to notify (830). For example, 
the user may select merchants, such as the telephone company, utility company, credit card 
company or bank. Notification may be accomplished by using the primary number and 

1 5 secondary number through the CPDB web site facility (840) or by contacting the companies 
directly one at a time. In each of these transactions, the us^may already have an account 
with the merchant or may desire to have one. 

Fig. 9 depicts flow chart of the update procedure. The user^iccesses the website 
(910). A determination is made as to whether the user requires a new\ccount or has an 

20 existing account (920). If the CPDB user already has an account, then th^rimary and 
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secondary number combination will be used for updating and posting changes into user's 
\CPDB record. If the user desires to have a new account, the user need only transmit two 
datk fields, i.e. the primary number and a secondary number, to create a new account with 
the merchant (930). Once the account is created, all required data fields can be extracted 
from the CWDB by the merchant using the primary number and the secondary. 

Fig. lOxiepicts the merchant access process. Once the merchant has the primary 
number and the secondary number, the merchant may access the CPDB. Each merchant in 
the CPDB merchant directory queries the centralized personal data base with the primary 
number and secondary number to obtain information about the user. For example, a 
merchant may require such inforhiation at the time of the monthly billing statements to 
customers. Also, on a pre-determined elate of every month (depending upon the number of 
records to be updated), the merchant can ujadate his data base with the CPDB in a process 
called synchronization. A used herein, sychrfetnization means either an automatic or 
merchant initiated transfer of the latest data to the^merchant from the CPDB at a pre- 
arranged time and pre-arranged schedule. For example, the merchant may synchronize his 
data base at the time of sending promotional offers, at the\time of sending important 
account information or policy changes, and while signing up new rnembers. Alternatively, 
the merchant may specify a time and day to automatically update infommtion. The process 
begins (902) and the merchant accesses the web site (910). The merchant enters the primary 
number and the secondary number. A determination is made as to whether both numbers 
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re correct (930). If both numbers are not correct the process returns to step 920. If both 
numofers are correct, a determination is made whether the merchant wants to search and 
acquire daws(940). If the merchant wants to search and acquire data, then the search is 
conducted, the infbmiation acquired and the information transmitted to the merchant 
account (950). If the merchant does not want to search and acquire data, then the process 
determines whether the merchanbwants to synchronize data. If the merchant wants to 
synchronize data, then a determination ishnade whether the merchant wants to initiate an 
update at the present time or to schedule an automatic update. If the merchant wants to 
initiate an update at the present time, the merchant information is updated (970). If the 
merchant wants to schedule an automatic update, the date and time for the update is 
entered. If the merchant does not want to synchronize data, then a determination is made as 




to whether another transaction is desired (980). If another transaction is desired, the process 
returns to step 920. If another transaction is not desired, then the process ends (990)^ 

The advantages provided by the present invention should be apparent in light of the 
detailed description provided above. The description of the present invention has been 
presented for purposes of illustration and description, but is not limited to be exhaustive or 
limited to the invention in the form disclosed. Many modifications and variations will be 
apparent to those of ordinary skill in the art. The embodiment was chosen and described in 
order to best explain the principles of the invention, the practical application, and to enable 
others of ordinary skill in the art to understand the invention for various embodiments with 
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various modifications as are suited to the particular use contemplated. 
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